Setting up a VPN connection between two FRITZ!Box networks

Through VPN (Virtual Private Network), you can connect two FRITZ!Box networks at different locations with each other. In this case, a securely encrypted "data tunnel" is established over the Internet; this tunnel allows direct IP access to the devices in the other network and all IP-based services such as e-mail servers, data banks, and file servers can be used without restriction.

Example values used in this guide

In this guide we show you how to connect the FRITZ!Box networks "FRITZ!Box A" and "FRITZ!Box B" to each other. When you set up your connection, replace the values used in this example with actual ones.

MyFRITZ! domain name of FRITZ!Box A:pi80ewgfi72d2os42.myfritz.net

IP network of FRITZ!Box A:192.168.10.0 (subnet mask: 255.255.255.0)

MyFRITZ! domain name of FRITZ!Box B:kw23qbmnj31x5aw75.myfritz.net

IP network of FRITZ!Box B:192.168.20.0 (subnet mask: 255.255.255.0)

VPN password (pre-shared key):secret

Requirements / Restrictions

Important:The FRITZ!Box is not accessible from the Internet over IPv4 when used on a DS-Lite ("Dual-Stack Lite") connection. When DS-Lite is active, the status "IPv4 over DS Lite" is displayed under "Connections" on the "Overview" page of the FRITZ!Box user interface.

FRITZ!OS 6 or later is installed on FRITZ!Box B.

Important:Some of the settings described here are only displayed if the advanced view is enabled in the user interface. The configuration procedure and notes on functions given in this guide refer to the latest FRITZ!OS.

1 Preparations

Setting up a MyFRITZ! account and determining the domain name

With MyFRITZ! you can even access a FRITZ!Box from the Internet at all times if its public IP address changes on a regular basis, for example after being automatically disconnected by your Internet service provider.

Note:You can use a different dynamic DNS service instead of MyFRITZ!. Since the FRITZ!Box gives higher priority to configured MyFRITZ! accounts, disable MyFRITZ! under "Internet > MyFRITZ!" in the user interface before setting up the VPN connection.

Note:You can either configure the same or different MyFRITZ! accounts in the two FRITZ!Boxes. Even if both FRITZ!Boxes use the same MyFRITZ! account, each FRITZ!Box has its own unique MyFRITZ! domain name.

Enable the option "Hold VPN connection permanently" if you would like the VPN connection to FRITZ!Box A to remain established.

Click "OK" to save the settings.

4 Establishing a VPN connection

If you enabled the option "Hold VPN connection permanently" in the FRITZ!Boxes, then the VPN connection will remain established.

If the option "Hold VPN connection permanently" is not enabled, then the VPN connection is automatically established whenever one of the networks accesses the other network and it is cleared again whenever it has been inactive for one hour.

Note:Active VPN connections are displayed in the user interface of the FRITZ!Boxes in the "Overview" in the "Connections" section.